CVE-2020-6303: XSS
Published Jan 14, 2020
·Updated
SAP Disclosure Management, before version 10.1, does not validate user input properly in specific use cases leading to Cross-Site Scripting.
Affected Software
1 affected component
SAP Disclosure Management<10.1
Event History
Jan 14, 2020
CVE Published
via MITRE·05:52 PM
Data Sourced
via MITRE·05:52 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for SAP Disclosure Management?
The vulnerability ID for SAP Disclosure Management is CVE-2020-6303.
2
What is the severity of CVE-2020-6303?
The severity of CVE-2020-6303 is medium with a CVSS score of 5.4.
3
How does CVE-2020-6303 affect SAP Disclosure Management?
CVE-2020-6303 affects SAP Disclosure Management by allowing Cross-Site Scripting (XSS) attacks due to improper validation of user input in specific use cases.
4
What is the affected version of SAP Disclosure Management?
The affected version of SAP Disclosure Management is up to but not including version 10.1.
5
How can I fix CVE-2020-6303 in SAP Disclosure Management?
To fix CVE-2020-6303 in SAP Disclosure Management, update to version 10.1 or higher.